Skip to content
Heist/ feed
Back to feed
UnratedFix available

drm/mipi-dsi: Detach devices when removing the host

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it. However, it doesn't detach it from the bus first, which leads to all kind of resource leaks if the host wants to perform some clean up whenever a device is detached.

Products
Kernel
Affected versions
Not specified
Fixed versions
4.14.296, 4.19.262, 4.9.331, 5.10.150, 5.15.75, 5.19.17, 5.4.220, 6.0.3
CVEs
CVE-2022-50489
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 15:43 UTC · Revision 1

Source evidence

drm/mipi-dsi: Detach devices when removing the host

core-osv · Original source

Published 4 Oct 2025, 15:43 UTC

In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it. However, it doesn't detach it from the bus first, which leads to all kind of resource leaks if the host wants to perform some clean up whenever a device is detached.

osv:CVE-2022-50489

Kernel

Fixed versions: 4.9.331, 4.14.296, 4.19.262, 5.4.220, 5.10.150, 5.15.75, 5.19.17, 6.0.3

Complete source record
{
  "id": "21a1d70e34b3e675ada6bd075119e6a92d1cbf47193782b2528afcca768478f5",
  "url": "https://osv.dev/vulnerability/CVE-2022-50489",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "drm/mipi-dsi: Detach devices when removing the host",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it. However, it doesn't detach it from the bus first, which leads to all kind of resource leaks if the host wants to perform some clean up whenever a device is detached.",
    "evidence": "osv:CVE-2022-50489",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.9.331",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "4.14.296",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "4.19.262",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.4.220",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.150",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.75",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.19.17",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.0.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2022-50489",
      "aliases": [
        "CVE-2022-50489"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "068a00233969833f1ba925e7627797489efd6041"
                },
                {
                  "fixed": "c202cda08cd5693645d4990ad1eb2e8068a884ec"
                },
                {
                  "fixed": "262364574b05676d4b9ebde2ddd3588cd2efd8ce"
                },
                {
                  "fixed": "95ae458209f5a556bba98aff872f933694914eb7"
                },
                {
                  "fixed": "8242167cfc83dd7e4c96f44b45f108db9bb88146"
                },
                {
                  "fixed": "45120fa5e522d444e3fc1c5a9afc5d53eed91d00"
                },
                {
                  "fixed": "26c1b4cfe56f040f71a51c92da1f4cac2e3b9455"
                },
                {
                  "fixed": "353ab1c13fdd6e524edde780235a8ce9b892c81c"
                },
                {
                  "fixed": "6fc2cd40db1969ba372ce9536dcfcdb87271eac4"
                },
                {
                  "fixed": "668a8f17b5290d04ef7343636a5588a0692731a1"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50489.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "3.14.0"
                },
                {
                  "fixed": "4.9.331"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.10.0"
                },
                {
                  "fixed": "4.14.296"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.15.0"
                },
                {
                  "fixed": "4.19.262"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.20.0"
                },
                {
                  "fixed": "5.4.220"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.150"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.75"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "5.19.17"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.20.0"
                },
                {
                  "fixed": "6.0.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50489.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:30.188683088Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/262364574b05676d4b9ebde2ddd3588cd2efd8ce",
        "https://git.kernel.org/stable/c/26c1b4cfe56f040f71a51c92da1f4cac2e3b9455",
        "https://git.kernel.org/stable/c/353ab1c13fdd6e524edde780235a8ce9b892c81c",
        "https://git.kernel.org/stable/c/45120fa5e522d444e3fc1c5a9afc5d53eed91d00",
        "https://git.kernel.org/stable/c/668a8f17b5290d04ef7343636a5588a0692731a1",
        "https://git.kernel.org/stable/c/6fc2cd40db1969ba372ce9536dcfcdb87271eac4",
        "https://git.kernel.org/stable/c/8242167cfc83dd7e4c96f44b45f108db9bb88146",
        "https://git.kernel.org/stable/c/95ae458209f5a556bba98aff872f933694914eb7",
        "https://git.kernel.org/stable/c/c202cda08cd5693645d4990ad1eb2e8068a884ec",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50489.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50489",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50489.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2022-50489",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 496938,
  "published_at": "2025-10-04T15:43:43.124+00:00"
}